@agimon-ai/po 0.0.0-alpha.0

package/dist/src/builders/web/bundle.mjs

@@ -0,0 +1,221 @@
+import { scanWebPlugins } from "./webPluginScan.mjs";
+import { bundleAssetPolicyPlugin } from "./bundleAssetPolicy.mjs";
+import { PLUGIN_ROOTS_FILE } from "./webDevRoots.mjs";
+import { BASE_STYLE_ENTRY, pluginStyleEntryName, writeSyncWebPluginModules, writeWebPluginStyleEntries } from "./webPluginGenerate.mjs";
+import { WEB_PLUGIN_FACADE_CHUNK, isWebPluginFacade, webPluginCssAlias, webPluginOverridePlugin, webPluginRuntimeAliases, webPluginRuntimeFacadePlugin } from "./webPluginVite.mjs";
+import fs from "node:fs";
+import path from "node:path";
+//#region src/builders/web/bundle.ts
+/** Shared runtime packages every plugin's client code must resolve to the host copies. */
+const DEDUPED_RUNTIMES = [
+	"react",
+	"react-dom",
+	"@tanstack/store",
+	"@tanstack/react-store",
+	"@tanstack/react-router",
+	"@agimon-ai/po-core",
+	"@agimon-ai/po-web-dashboard",
+	"@agimon-ai/po-web-components",
+	"@agimon-ai/po-web-security",
+	"@codemirror/state",
+	"@codemirror/view"
+];
+/**
+* The files one manifest entry reaches: `files` follows static and dynamic imports and holds
+* every chunk, asset, and stylesheet on the way; `css` follows static imports only.
+*/
+function manifestClosure(manifest, entryKey) {
+	const chunkOf = (key) => {
+		const chunk = manifest[key];
+		if (chunk === void 0) throw new Error(`The composition manifest has no chunk '${key}'.`);
+		return chunk;
+	};
+	const files = /* @__PURE__ */ new Set();
+	const visited = /* @__PURE__ */ new Set();
+	const walk = (key) => {
+		if (visited.has(key)) return;
+		visited.add(key);
+		const chunk = chunkOf(key);
+		files.add(chunk.file);
+		for (const file of [...chunk.css ?? [], ...chunk.assets ?? []]) files.add(file);
+		for (const next of [...chunk.imports ?? [], ...chunk.dynamicImports ?? []]) walk(next);
+	};
+	walk(entryKey);
+	const css = /* @__PURE__ */ new Set();
+	const staticVisited = /* @__PURE__ */ new Set();
+	const walkStatic = (key) => {
+		if (staticVisited.has(key)) return;
+		staticVisited.add(key);
+		const chunk = chunkOf(key);
+		for (const file of chunk.css ?? []) css.add(file);
+		for (const next of chunk.imports ?? []) walkStatic(next);
+	};
+	walkStatic(entryKey);
+	return {
+		entry: chunkOf(entryKey).file,
+		files: [...files],
+		css: [...css]
+	};
+}
+/**
+* Builds the cockpit SPA against the installed plugin set.
+*
+* This is what `po sync` calls: manifests come from the given package
+* roots (no hardcoded plugin dependencies anywhere), the generated entry
+* modules are aliased over the committed builtin registry, and Vite compiles
+* the host shell and, separately, each plugin's shipped web source into one
+* ES-module composition with an entry per slot, so each plugin and its assets ship once.
+* The roots file beside
+* the bundle lets the dev server serve the same composition with hot reload.
+*/
+async function bundleCockpitWeb(options) {
+	const notice = options.onNotice ?? (() => {});
+	const hostRoot = options.hostRoot;
+	const plugins = scanWebPlugins(hostRoot, options.pluginRoots, notice);
+	notice(`bundling the cockpit with ${String(plugins.length)} web plugin(s): ${plugins.map((p) => p.pluginId).join(", ")}`);
+	const generatedDir = path.join(options.outDir, "generated");
+	const assetsDir = path.join(options.outDir, "web");
+	const pluginsDir = path.join(options.outDir, "plugins");
+	const generated = writeSyncWebPluginModules(plugins, generatedDir, hostRoot);
+	const roots = [...new Set(options.pluginRoots.map((root) => path.resolve(root)))];
+	fs.writeFileSync(path.join(options.outDir, PLUGIN_ROOTS_FILE), `${JSON.stringify(roots, null, 2)}\n`);
+	const { build } = await import("vite");
+	const { default: react } = await import("@vitejs/plugin-react");
+	const { default: tailwindcss } = await import("@tailwindcss/vite");
+	const clientRoot = path.join(hostRoot, "src", "web");
+	await build({
+		configFile: false,
+		envDir: false,
+		logLevel: "warn",
+		root: clientRoot,
+		plugins: [
+			webPluginOverridePlugin(clientRoot, generated.shell),
+			react(),
+			tailwindcss(),
+			bundleAssetPolicyPlugin()
+		],
+		resolve: {
+			dedupe: [...DEDUPED_RUNTIMES],
+			alias: [...webPluginRuntimeAliases(clientRoot), webPluginCssAlias(generated.shell)]
+		},
+		build: {
+			outDir: assetsDir,
+			emptyOutDir: true,
+			sourcemap: false
+		}
+	});
+	await build({
+		configFile: false,
+		envDir: false,
+		logLevel: "warn",
+		base: "./",
+		plugins: [
+			webPluginRuntimeFacadePlugin(hostRoot),
+			react(),
+			tailwindcss()
+		],
+		resolve: {
+			dedupe: [...DEDUPED_RUNTIMES],
+			alias: [webPluginCssAlias(generated)]
+		},
+		build: {
+			cssCodeSplit: true,
+			modulePreload: false,
+			outDir: pluginsDir,
+			emptyOutDir: true,
+			sourcemap: false,
+			assetsInlineLimit: 0,
+			manifest: "manifest.json",
+			rollupOptions: {
+				input: generated.slotEntryPaths,
+				preserveEntrySignatures: "exports-only",
+				output: {
+					format: "es",
+					entryFileNames: "slots/[name]-[hash].js",
+					chunkFileNames: "chunks/[name]-[hash].js",
+					assetFileNames: "assets/[name]-[hash][extname]",
+					manualChunks: (id) => isWebPluginFacade(id) ? WEB_PLUGIN_FACADE_CHUNK : void 0
+				}
+			}
+		}
+	});
+	const manifest = JSON.parse(fs.readFileSync(path.join(pluginsDir, "manifest.json"), "utf8"));
+	const manifestRoot = fs.realpathSync(process.cwd());
+	const closures = new Map(plugins.map((plugin) => {
+		const entryPath = fs.realpathSync(generated.slotEntryPaths[plugin.slot]);
+		return [plugin.slot, manifestClosure(manifest, path.relative(manifestRoot, entryPath).split(path.sep).join("/"))];
+	}));
+	const styles = writeWebPluginStyleEntries(plugins, generatedDir, hostRoot);
+	const stylesRoot = path.dirname(styles.baseEntryPath);
+	await build({
+		configFile: false,
+		envDir: false,
+		logLevel: "warn",
+		root: stylesRoot,
+		base: "./",
+		plugins: [tailwindcss()],
+		resolve: { alias: [{
+			find: /^\.\/webPluginSources\.generated\.css$/,
+			replacement: styles.baseSourcesPath
+		}] },
+		build: {
+			cssCodeSplit: true,
+			outDir: pluginsDir,
+			emptyOutDir: false,
+			sourcemap: false,
+			assetsInlineLimit: 0,
+			manifest: "styles.manifest.json",
+			rollupOptions: {
+				input: Object.fromEntries([[BASE_STYLE_ENTRY, styles.baseEntryPath], ...[...styles.pluginEntryPaths].map(([slot, entry]) => [pluginStyleEntryName(slot), entry])]),
+				output: { assetFileNames: "assets/[name]-[hash][extname]" }
+			}
+		}
+	});
+	const styleManifest = JSON.parse(fs.readFileSync(path.join(pluginsDir, "styles.manifest.json"), "utf8"));
+	fs.rmSync(path.join(pluginsDir, "styles.manifest.json"));
+	const emitted = (entry) => {
+		const record = styleManifest[path.relative(stylesRoot, entry).split(path.sep).join("/")];
+		const file = record?.file?.endsWith(".css") ? record.file : record?.css?.[0];
+		if (file === void 0) throw new Error(`The stylesheet entry '${entry}' emitted no CSS file.`);
+		return {
+			file,
+			assets: record?.assets ?? []
+		};
+	};
+	const base = emitted(styles.baseEntryPath);
+	const slotStyles = new Map(plugins.map((plugin) => {
+		const entry = styles.pluginEntryPaths.get(plugin.slot);
+		return [plugin.slot, entry === void 0 ? base : emitted(entry)];
+	}));
+	const pluginStyles = Object.fromEntries([...slotStyles].map(([slot, style]) => [slot, style.file]));
+	fs.writeFileSync(path.join(pluginsDir, "index.html"), "<!doctype html>\n<title>Po plugin composition</title>\n");
+	return {
+		assetsDir,
+		pluginsDir,
+		pluginIds: plugins.map((plugin) => plugin.pluginId),
+		plugins: plugins.map((plugin) => {
+			const closure = closures.get(plugin.slot);
+			const style = slotStyles.get(plugin.slot);
+			if (closure === void 0 || style === void 0) throw new Error(`The slot '${plugin.slot}' emitted no entry.`);
+			return {
+				pluginId: plugin.pluginId,
+				slot: plugin.slot,
+				packageDir: plugin.packageDir,
+				isHost: plugin.isHost,
+				entry: closure.entry,
+				files: [.../* @__PURE__ */ new Set([
+					...closure.files,
+					style.file,
+					...style.assets
+				])],
+				css: closure.css
+			};
+		}),
+		pluginStyles,
+		baseStyle: base.file
+	};
+}
+//#endregion
+export { bundleCockpitWeb, manifestClosure };
+
+//# sourceMappingURL=bundle.mjs.map

package/dist/src/builders/web/bundle.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.mjs","names":[],"sources":["../../../../src/builders/web/bundle.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { bundleAssetPolicyPlugin } from './bundleAssetPolicy';\nimport { PLUGIN_ROOTS_FILE } from './webDevRoots';\nimport {\n  BASE_STYLE_ENTRY,\n  pluginStyleEntryName,\n  writeSyncWebPluginModules,\n  writeWebPluginStyleEntries,\n} from './webPluginGenerate';\nimport { scanWebPlugins } from './webPluginScan';\nimport {\n  isWebPluginFacade,\n  WEB_PLUGIN_FACADE_CHUNK,\n  webPluginCssAlias,\n  webPluginOverridePlugin,\n  webPluginRuntimeAliases,\n  webPluginRuntimeFacadePlugin,\n} from './webPluginVite';\n\n/** Shared runtime packages every plugin's client code must resolve to the host copies. */\nconst DEDUPED_RUNTIMES = [\n  'react',\n  'react-dom',\n  '@tanstack/store',\n  '@tanstack/react-store',\n  '@tanstack/react-router',\n  '@agimon-ai/po-core',\n  '@agimon-ai/po-web-dashboard',\n  '@agimon-ai/po-web-components',\n  // The sealed transport is a module singleton whose nonce counters every\n  // plugin shares; a second copy would start counting at zero.\n  '@agimon-ai/po-web-security',\n  // CodeMirror's state and view are singletons in all but name: a document\n  // built against one copy is rejected by an editor from the other, and a\n  // grammar chunk resolved separately from the editor is exactly how a second\n  // copy appears.\n  '@codemirror/state',\n  '@codemirror/view',\n];\n\nexport interface BundleCockpitWebOptions {\n  hostRoot: string;\n  /** Package roots to scan for poWeb manifests, usually the installed composition. */\n  pluginRoots: readonly string[];\n  /** Output directory; receives web/, plugins/, generated/, and pluginRoots.json. */\n  outDir: string;\n  onNotice?: (message: string) => void;\n}\n\nexport interface BundleCockpitWebResult {\n  /** The cockpit shell with the host's own plugins; every other plugin ships in pluginsDir. */\n  assetsDir: string;\n  /** Standalone session plugin composition artifacts. */\n  pluginsDir: string;\n  pluginIds: string[];\n  /** Every declared plugin copy with its slot and the files its slot entry reaches. */\n  plugins: WebPluginBuildRecord[];\n  /** One content-hashed stylesheet per slot below pluginsDir; host plugins share the base. */\n  pluginStyles: Record<string, string>;\n  /** The shell-only stylesheet below pluginsDir. */\n  baseStyle: string;\n}\n\n/** One plugin copy in a build: its slot entry and the emitted files that entry can load. */\nexport interface WebPluginBuildRecord {\n  pluginId: string;\n  slot: string;\n  packageDir: string;\n  isHost: boolean;\n  /** The slot entry module below pluginsDir. */\n  entry: string;\n  /** Every file the entry reaches through static and dynamic imports, plus the slot stylesheet and its assets. */\n  files: string[];\n  /** The stylesheets of the entry's static import closure, which a mount loads up front. */\n  css: string[];\n}\n\ninterface ManifestChunk {\n  file: string;\n  imports?: string[];\n  dynamicImports?: string[];\n  css?: string[];\n  assets?: string[];\n}\n\n/**\n * The files one manifest entry reaches: `files` follows static and dynamic imports and holds\n * every chunk, asset, and stylesheet on the way; `css` follows static imports only.\n */\nexport function manifestClosure(\n  manifest: Readonly<Record<string, ManifestChunk>>,\n  entryKey: string,\n): { entry: string; files: string[]; css: string[] } {\n  const chunkOf = (key: string): ManifestChunk => {\n    const chunk = manifest[key];\n    if (chunk === undefined) throw new Error(`The composition manifest has no chunk '${key}'.`);\n    return chunk;\n  };\n  const files = new Set<string>();\n  const visited = new Set<string>();\n  const walk = (key: string): void => {\n    if (visited.has(key)) return;\n    visited.add(key);\n    const chunk = chunkOf(key);\n    files.add(chunk.file);\n    for (const file of [...(chunk.css ?? []), ...(chunk.assets ?? [])]) files.add(file);\n    for (const next of [...(chunk.imports ?? []), ...(chunk.dynamicImports ?? [])]) walk(next);\n  };\n  walk(entryKey);\n  const css = new Set<string>();\n  const staticVisited = new Set<string>();\n  const walkStatic = (key: string): void => {\n    if (staticVisited.has(key)) return;\n    staticVisited.add(key);\n    const chunk = chunkOf(key);\n    for (const file of chunk.css ?? []) css.add(file);\n    for (const next of chunk.imports ?? []) walkStatic(next);\n  };\n  walkStatic(entryKey);\n  return { entry: chunkOf(entryKey).file, files: [...files], css: [...css] };\n}\n\n/**\n * Builds the cockpit SPA against the installed plugin set.\n *\n * This is what `po sync` calls: manifests come from the given package\n * roots (no hardcoded plugin dependencies anywhere), the generated entry\n * modules are aliased over the committed builtin registry, and Vite compiles\n * the host shell and, separately, each plugin's shipped web source into one\n * ES-module composition with an entry per slot, so each plugin and its assets ship once.\n * The roots file beside\n * the bundle lets the dev server serve the same composition with hot reload.\n */\nexport async function bundleCockpitWeb(options: BundleCockpitWebOptions): Promise<BundleCockpitWebResult> {\n  const notice = options.onNotice ?? ((): void => {});\n  const hostRoot = options.hostRoot;\n  const plugins = scanWebPlugins(hostRoot, options.pluginRoots, notice);\n  notice(\n    `bundling the cockpit with ${String(plugins.length)} web plugin(s): ${plugins.map((p) => p.pluginId).join(', ')}`,\n  );\n\n  const generatedDir = path.join(options.outDir, 'generated');\n  const assetsDir = path.join(options.outDir, 'web');\n  const pluginsDir = path.join(options.outDir, 'plugins');\n  const generated = writeSyncWebPluginModules(plugins, generatedDir, hostRoot);\n  const roots = [...new Set(options.pluginRoots.map((root) => path.resolve(root)))];\n  fs.writeFileSync(path.join(options.outDir, PLUGIN_ROOTS_FILE), `${JSON.stringify(roots, null, 2)}\\n`);\n\n  // Vite and its plugins are regular dependencies so this works from an\n  // installed package, not only the workspace.\n  const { build } = await import('vite');\n  const { default: react } = await import('@vitejs/plugin-react');\n  const { default: tailwindcss } = await import('@tailwindcss/vite');\n\n  const clientRoot = path.join(hostRoot, 'src', 'web');\n\n  // The shell carries only the host's own plugins; the rest load from the composition below.\n  await build({\n    configFile: false,\n    envDir: false,\n    logLevel: 'warn',\n    root: clientRoot,\n    plugins: [webPluginOverridePlugin(clientRoot, generated.shell), react(), tailwindcss(), bundleAssetPolicyPlugin()],\n    resolve: {\n      dedupe: [...DEDUPED_RUNTIMES],\n      alias: [...webPluginRuntimeAliases(clientRoot), webPluginCssAlias(generated.shell)],\n    },\n    build: {\n      outDir: assetsDir,\n      emptyOutDir: true,\n      sourcemap: false,\n    },\n  });\n\n  // One ES-module composition: an entry per slot exporting its webPlugin, shared chunks\n  // between them, and the shared runtime modules read from the page through facades.\n  await build({\n    configFile: false,\n    envDir: false,\n    logLevel: 'warn',\n    base: './',\n    plugins: [webPluginRuntimeFacadePlugin(hostRoot), react(), tailwindcss()],\n    resolve: {\n      dedupe: [...DEDUPED_RUNTIMES],\n      alias: [webPluginCssAlias(generated)],\n    },\n    build: {\n      cssCodeSplit: true,\n      modulePreload: false,\n      outDir: pluginsDir,\n      emptyOutDir: true,\n      sourcemap: false,\n      assetsInlineLimit: 0,\n      manifest: 'manifest.json',\n      rollupOptions: {\n        input: generated.slotEntryPaths,\n        // Each slot entry is loaded for its webPlugin export, so it must keep it.\n        preserveEntrySignatures: 'exports-only',\n        output: {\n          format: 'es',\n          entryFileNames: 'slots/[name]-[hash].js',\n          chunkFileNames: 'chunks/[name]-[hash].js',\n          assetFileNames: 'assets/[name]-[hash][extname]',\n          manualChunks: (id) => (isWebPluginFacade(id) ? WEB_PLUGIN_FACADE_CHUNK : undefined),\n        },\n      },\n    },\n  });\n  const manifest = JSON.parse(fs.readFileSync(path.join(pluginsDir, 'manifest.json'), 'utf8')) as Record<\n    string,\n    ManifestChunk\n  >;\n  // Manifest keys are the entry sources relative to the build root, which is the working directory.\n  const manifestRoot = fs.realpathSync(process.cwd());\n  const closures = new Map(\n    plugins.map((plugin) => {\n      const entryPath = fs.realpathSync(generated.slotEntryPaths[plugin.slot]);\n      return [plugin.slot, manifestClosure(manifest, path.relative(manifestRoot, entryPath).split(path.sep).join('/'))];\n    }),\n  );\n\n  // One content-hashed stylesheet per plugin, compiled from its own sources over the shell's.\n  const styles = writeWebPluginStyleEntries(plugins, generatedDir, hostRoot);\n  const stylesRoot = path.dirname(styles.baseEntryPath);\n  await build({\n    configFile: false,\n    envDir: false,\n    logLevel: 'warn',\n    root: stylesRoot,\n    base: './',\n    plugins: [tailwindcss()],\n    resolve: {\n      alias: [{ find: /^\\.\\/webPluginSources\\.generated\\.css$/, replacement: styles.baseSourcesPath }],\n    },\n    build: {\n      cssCodeSplit: true,\n      outDir: pluginsDir,\n      emptyOutDir: false,\n      sourcemap: false,\n      assetsInlineLimit: 0,\n      manifest: 'styles.manifest.json',\n      rollupOptions: {\n        input: Object.fromEntries([\n          [BASE_STYLE_ENTRY, styles.baseEntryPath],\n          ...[...styles.pluginEntryPaths].map(([slot, entry]) => [pluginStyleEntryName(slot), entry]),\n        ]),\n        output: { assetFileNames: 'assets/[name]-[hash][extname]' },\n      },\n    },\n  });\n  const styleManifest = JSON.parse(fs.readFileSync(path.join(pluginsDir, 'styles.manifest.json'), 'utf8')) as Record<\n    string,\n    { file?: string; css?: string[]; assets?: string[] }\n  >;\n  fs.rmSync(path.join(pluginsDir, 'styles.manifest.json'));\n  const emitted = (entry: string): { file: string; assets: string[] } => {\n    const record = styleManifest[path.relative(stylesRoot, entry).split(path.sep).join('/')];\n    const file = record?.file?.endsWith('.css') ? record.file : record?.css?.[0];\n    if (file === undefined) throw new Error(`The stylesheet entry '${entry}' emitted no CSS file.`);\n    return { file, assets: record?.assets ?? [] };\n  };\n  const base = emitted(styles.baseEntryPath);\n  const slotStyles = new Map(\n    plugins.map((plugin) => {\n      const entry = styles.pluginEntryPaths.get(plugin.slot);\n      return [plugin.slot, entry === undefined ? base : emitted(entry)];\n    }),\n  );\n  const pluginStyles = Object.fromEntries([...slotStyles].map(([slot, style]) => [slot, style.file]));\n  fs.writeFileSync(path.join(pluginsDir, 'index.html'), '<!doctype html>\\n<title>Po plugin composition</title>\\n');\n\n  return {\n    assetsDir,\n    pluginsDir,\n    pluginIds: plugins.map((plugin) => plugin.pluginId),\n    plugins: plugins.map((plugin) => {\n      const closure = closures.get(plugin.slot);\n      const style = slotStyles.get(plugin.slot);\n      if (closure === undefined || style === undefined) throw new Error(`The slot '${plugin.slot}' emitted no entry.`);\n      return {\n        pluginId: plugin.pluginId,\n        slot: plugin.slot,\n        packageDir: plugin.packageDir,\n        isHost: plugin.isHost,\n        entry: closure.entry,\n        // The slot's own stylesheet and the fonts it references load with it.\n        files: [...new Set([...closure.files, style.file, ...style.assets])],\n        css: closure.css,\n      };\n    }),\n    pluginStyles,\n    baseStyle: base.file,\n  };\n}\n"],"mappings":";;;;;;;;;AAsBA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CAKA;CACA;AACF;;;;;AAmDA,SAAgB,gBACd,UACA,UACmD;CACnD,MAAM,WAAW,QAA+B;EAC9C,MAAM,QAAQ,SAAS;EACvB,IAAI,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,0CAA0C,IAAI,GAAG;EAC1F,OAAO;CACT;CACA,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,QAAQ,QAAsB;EAClC,IAAI,QAAQ,IAAI,GAAG,GAAG;EACtB,QAAQ,IAAI,GAAG;EACf,MAAM,QAAQ,QAAQ,GAAG;EACzB,MAAM,IAAI,MAAM,IAAI;EACpB,KAAK,MAAM,QAAQ,CAAC,GAAI,MAAM,OAAO,CAAC,GAAI,GAAI,MAAM,UAAU,CAAC,CAAE,GAAG,MAAM,IAAI,IAAI;EAClF,KAAK,MAAM,QAAQ,CAAC,GAAI,MAAM,WAAW,CAAC,GAAI,GAAI,MAAM,kBAAkB,CAAC,CAAE,GAAG,KAAK,IAAI;CAC3F;CACA,KAAK,QAAQ;CACb,MAAM,sBAAM,IAAI,IAAY;CAC5B,MAAM,gCAAgB,IAAI,IAAY;CACtC,MAAM,cAAc,QAAsB;EACxC,IAAI,cAAc,IAAI,GAAG,GAAG;EAC5B,cAAc,IAAI,GAAG;EACrB,MAAM,QAAQ,QAAQ,GAAG;EACzB,KAAK,MAAM,QAAQ,MAAM,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI;EAChD,KAAK,MAAM,QAAQ,MAAM,WAAW,CAAC,GAAG,WAAW,IAAI;CACzD;CACA,WAAW,QAAQ;CACnB,OAAO;EAAE,OAAO,QAAQ,QAAQ,CAAC,CAAC;EAAM,OAAO,CAAC,GAAG,KAAK;EAAG,KAAK,CAAC,GAAG,GAAG;CAAE;AAC3E;;;;;;;;;;;;AAaA,eAAsB,iBAAiB,SAAmE;CACxG,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,WAAW,QAAQ;CACzB,MAAM,UAAU,eAAe,UAAU,QAAQ,aAAa,MAAM;CACpE,OACE,6BAA6B,OAAO,QAAQ,MAAM,EAAE,kBAAkB,QAAQ,KAAK,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI,GAChH;CAEA,MAAM,eAAe,KAAK,KAAK,QAAQ,QAAQ,WAAW;CAC1D,MAAM,YAAY,KAAK,KAAK,QAAQ,QAAQ,KAAK;CACjD,MAAM,aAAa,KAAK,KAAK,QAAQ,QAAQ,SAAS;CACtD,MAAM,YAAY,0BAA0B,SAAS,cAAc,QAAQ;CAC3E,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,YAAY,KAAK,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC;CAChF,GAAG,cAAc,KAAK,KAAK,QAAQ,QAAQ,iBAAiB,GAAG,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,GAAG;CAIpG,MAAM,EAAE,UAAU,MAAM,OAAO;CAC/B,MAAM,EAAE,SAAS,UAAU,MAAM,OAAO;CACxC,MAAM,EAAE,SAAS,gBAAgB,MAAM,OAAO;CAE9C,MAAM,aAAa,KAAK,KAAK,UAAU,OAAO,KAAK;CAGnD,MAAM,MAAM;EACV,YAAY;EACZ,QAAQ;EACR,UAAU;EACV,MAAM;EACN,SAAS;GAAC,wBAAwB,YAAY,UAAU,KAAK;GAAG,MAAM;GAAG,YAAY;GAAG,wBAAwB;EAAC;EACjH,SAAS;GACP,QAAQ,CAAC,GAAG,gBAAgB;GAC5B,OAAO,CAAC,GAAG,wBAAwB,UAAU,GAAG,kBAAkB,UAAU,KAAK,CAAC;EACpF;EACA,OAAO;GACL,QAAQ;GACR,aAAa;GACb,WAAW;EACb;CACF,CAAC;CAID,MAAM,MAAM;EACV,YAAY;EACZ,QAAQ;EACR,UAAU;EACV,MAAM;EACN,SAAS;GAAC,6BAA6B,QAAQ;GAAG,MAAM;GAAG,YAAY;EAAC;EACxE,SAAS;GACP,QAAQ,CAAC,GAAG,gBAAgB;GAC5B,OAAO,CAAC,kBAAkB,SAAS,CAAC;EACtC;EACA,OAAO;GACL,cAAc;GACd,eAAe;GACf,QAAQ;GACR,aAAa;GACb,WAAW;GACX,mBAAmB;GACnB,UAAU;GACV,eAAe;IACb,OAAO,UAAU;IAEjB,yBAAyB;IACzB,QAAQ;KACN,QAAQ;KACR,gBAAgB;KAChB,gBAAgB;KAChB,gBAAgB;KAChB,eAAe,OAAQ,kBAAkB,EAAE,IAAI,0BAA0B,KAAA;IAC3E;GACF;EACF;CACF,CAAC;CACD,MAAM,WAAW,KAAK,MAAM,GAAG,aAAa,KAAK,KAAK,YAAY,eAAe,GAAG,MAAM,CAAC;CAK3F,MAAM,eAAe,GAAG,aAAa,QAAQ,IAAI,CAAC;CAClD,MAAM,WAAW,IAAI,IACnB,QAAQ,KAAK,WAAW;EACtB,MAAM,YAAY,GAAG,aAAa,UAAU,eAAe,OAAO,KAAK;EACvE,OAAO,CAAC,OAAO,MAAM,gBAAgB,UAAU,KAAK,SAAS,cAAc,SAAS,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;CAClH,CAAC,CACH;CAGA,MAAM,SAAS,2BAA2B,SAAS,cAAc,QAAQ;CACzE,MAAM,aAAa,KAAK,QAAQ,OAAO,aAAa;CACpD,MAAM,MAAM;EACV,YAAY;EACZ,QAAQ;EACR,UAAU;EACV,MAAM;EACN,MAAM;EACN,SAAS,CAAC,YAAY,CAAC;EACvB,SAAS,EACP,OAAO,CAAC;GAAE,MAAM;GAA0C,aAAa,OAAO;EAAgB,CAAC,EACjG;EACA,OAAO;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,WAAW;GACX,mBAAmB;GACnB,UAAU;GACV,eAAe;IACb,OAAO,OAAO,YAAY,CACxB,CAAC,kBAAkB,OAAO,aAAa,GACvC,GAAG,CAAC,GAAG,OAAO,gBAAgB,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,qBAAqB,IAAI,GAAG,KAAK,CAAC,CAC5F,CAAC;IACD,QAAQ,EAAE,gBAAgB,gCAAgC;GAC5D;EACF;CACF,CAAC;CACD,MAAM,gBAAgB,KAAK,MAAM,GAAG,aAAa,KAAK,KAAK,YAAY,sBAAsB,GAAG,MAAM,CAAC;CAIvG,GAAG,OAAO,KAAK,KAAK,YAAY,sBAAsB,CAAC;CACvD,MAAM,WAAW,UAAsD;EACrE,MAAM,SAAS,cAAc,KAAK,SAAS,YAAY,KAAK,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;EACtF,MAAM,OAAO,QAAQ,MAAM,SAAS,MAAM,IAAI,OAAO,OAAO,QAAQ,MAAM;EAC1E,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,yBAAyB,MAAM,uBAAuB;EAC9F,OAAO;GAAE;GAAM,QAAQ,QAAQ,UAAU,CAAC;EAAE;CAC9C;CACA,MAAM,OAAO,QAAQ,OAAO,aAAa;CACzC,MAAM,aAAa,IAAI,IACrB,QAAQ,KAAK,WAAW;EACtB,MAAM,QAAQ,OAAO,iBAAiB,IAAI,OAAO,IAAI;EACrD,OAAO,CAAC,OAAO,MAAM,UAAU,KAAA,IAAY,OAAO,QAAQ,KAAK,CAAC;CAClE,CAAC,CACH;CACA,MAAM,eAAe,OAAO,YAAY,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;CAClG,GAAG,cAAc,KAAK,KAAK,YAAY,YAAY,GAAG,yDAAyD;CAE/G,OAAO;EACL;EACA;EACA,WAAW,QAAQ,KAAK,WAAW,OAAO,QAAQ;EAClD,SAAS,QAAQ,KAAK,WAAW;GAC/B,MAAM,UAAU,SAAS,IAAI,OAAO,IAAI;GACxC,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI;GACxC,IAAI,YAAY,KAAA,KAAa,UAAU,KAAA,GAAW,MAAM,IAAI,MAAM,aAAa,OAAO,KAAK,oBAAoB;GAC/G,OAAO;IACL,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,OAAO,QAAQ;IAEf,OAAO,CAAC,mBAAG,IAAI,IAAI;KAAC,GAAG,QAAQ;KAAO,MAAM;KAAM,GAAG,MAAM;IAAM,CAAC,CAAC;IACnE,KAAK,QAAQ;GACf;EACF,CAAC;EACD;EACA,WAAW,KAAK;CAClB;AACF"}

package/dist/src/builders/web/bundleAssetPolicy.cjs

@@ -0,0 +1,96 @@
+let _agimon_ai_po_core_bundleAssetPolicy = require("@agimon-ai/po-core/bundleAssetPolicy");
+//#region src/builders/web/bundleAssetPolicy.ts
+const OPTIONAL_PACKAGES = ["/node_modules/mermaid/", "/node_modules/pdfjs-dist/"];
+function packageOwner(output, owned) {
+	const ids = Object.keys(output.modules ?? {});
+	return OPTIONAL_PACKAGES.find((dependency) => ids.some((id) => id.replaceAll("\\", "/").includes(dependency)) && ids.every((id) => owned.get(dependency)?.has(id)));
+}
+function references(output) {
+	if (output.type === "asset") return [];
+	return [
+		...output.imports ?? [],
+		...output.dynamicImports ?? [],
+		...output.referencedFiles ?? [],
+		...output.viteMetadata?.importedAssets ?? []
+	];
+}
+/** Classifies only output owned exclusively by a known optional dependency graph. */
+function classifyOptionalBundleAssets(bundle, moduleDependencies) {
+	const outputs = new Map(Object.entries(bundle));
+	const owned = /* @__PURE__ */ new Map();
+	for (const dependency of OPTIONAL_PACKAGES) {
+		const modules = /* @__PURE__ */ new Set();
+		const visit = (id) => {
+			if (modules.has(id) || !id.replaceAll("\\", "/").includes("/node_modules/")) return;
+			modules.add(id);
+			for (const imported of moduleDependencies?.(id) ?? []) visit(imported);
+		};
+		for (const output of outputs.values()) for (const id of Object.keys(output.modules ?? {})) if (id.replaceAll("\\", "/").includes(dependency)) visit(id);
+		owned.set(dependency, modules);
+	}
+	const graphReferences = (output) => {
+		const source = output.code ?? (typeof output.source === "string" ? output.source : output.source === void 0 ? "" : new TextDecoder().decode(output.source));
+		return [...references(output), ...[...outputs].filter(([fileName, candidate]) => candidate.type === "asset" && source.includes(fileName)).map(([fileName]) => fileName)];
+	};
+	const optionalRoots = /* @__PURE__ */ new Map();
+	for (const [fileName, output] of outputs) {
+		if (output.type !== "chunk") continue;
+		const owner = packageOwner(output, owned);
+		const facade = output.facadeModuleId?.replaceAll("\\", "/");
+		if (owner !== void 0 && (!output.isEntry || OPTIONAL_PACKAGES.some((dependency) => facade?.includes(dependency)))) optionalRoots.set(fileName, owner);
+	}
+	const eager = /* @__PURE__ */ new Set();
+	const visitEager = (fileName) => {
+		if (eager.has(fileName)) return;
+		eager.add(fileName);
+		const output = outputs.get(fileName);
+		if (output === void 0) return;
+		for (const reference of graphReferences(output)) if (!(optionalRoots.has(reference) && output.dynamicImports?.includes(reference))) visitEager(reference);
+	};
+	for (const [fileName, output] of outputs) if (fileName === "index.html" || output.type === "chunk" && output.isEntry && !optionalRoots.has(fileName)) visitEager(fileName);
+	const optional = /* @__PURE__ */ new Set();
+	const visitOptional = (fileName, owner) => {
+		if (eager.has(fileName) || optional.has(fileName)) return;
+		const output = outputs.get(fileName);
+		if (output === void 0) return;
+		if (output.type === "chunk") {
+			const ids = Object.keys(output.modules ?? {});
+			if (ids.length === 0 || !ids.every((id) => owned.get(owner)?.has(id))) {
+				visitEager(fileName);
+				return;
+			}
+		}
+		optional.add(fileName);
+		for (const reference of graphReferences(output)) {
+			const referencedRootOwner = optionalRoots.get(reference);
+			if (referencedRootOwner === void 0 || referencedRootOwner === owner) visitOptional(reference, owner);
+		}
+	};
+	for (const [fileName, owner] of optionalRoots) visitOptional(fileName, owner);
+	return [...optional].filter((fileName) => !eager.has(fileName) && !fileName.endsWith(".map")).map((fileName) => `/${fileName}`).sort();
+}
+/** Emits an authenticated v1 policy derived from Rollup's module and resource graph. */
+function bundleAssetPolicyPlugin() {
+	return {
+		name: "po-bundle-asset-policy",
+		generateBundle(_options, bundle) {
+			const policy = {
+				version: _agimon_ai_po_core_bundleAssetPolicy.BUNDLE_ASSET_POLICY_VERSION,
+				optional: classifyOptionalBundleAssets(bundle, (id) => {
+					const info = this.getModuleInfo(id);
+					return info === null ? void 0 : [...info.importedIds, ...info.dynamicallyImportedIds];
+				})
+			};
+			this.emitFile({
+				type: "asset",
+				fileName: _agimon_ai_po_core_bundleAssetPolicy.BUNDLE_ASSET_POLICY_PATH.slice(1),
+				source: `${JSON.stringify(policy)}\n`
+			});
+		}
+	};
+}
+//#endregion
+exports.bundleAssetPolicyPlugin = bundleAssetPolicyPlugin;
+exports.classifyOptionalBundleAssets = classifyOptionalBundleAssets;
+
+//# sourceMappingURL=bundleAssetPolicy.cjs.map

package/dist/src/builders/web/bundleAssetPolicy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleAssetPolicy.cjs","names":["BUNDLE_ASSET_POLICY_VERSION","BUNDLE_ASSET_POLICY_PATH"],"sources":["../../../../src/builders/web/bundleAssetPolicy.ts"],"sourcesContent":["import {\n  BUNDLE_ASSET_POLICY_PATH,\n  BUNDLE_ASSET_POLICY_VERSION,\n  type BundleAssetPolicy,\n} from '@agimon-ai/po-core/bundleAssetPolicy';\nimport type { Plugin } from 'vite';\n\nconst OPTIONAL_PACKAGES = ['/node_modules/mermaid/', '/node_modules/pdfjs-dist/'] as const;\n\ninterface PolicyOutput {\n  type: 'asset' | 'chunk';\n  isEntry?: boolean;\n  facadeModuleId?: string | null;\n  modules?: Record<string, unknown>;\n  imports?: string[];\n  dynamicImports?: string[];\n  referencedFiles?: string[];\n  code?: string;\n  source?: string | Uint8Array;\n  viteMetadata?: { importedAssets?: Set<string> };\n}\n\nfunction packageOwner(output: PolicyOutput, owned: ReadonlyMap<string, ReadonlySet<string>>): string | undefined {\n  const ids = Object.keys(output.modules ?? {});\n  return OPTIONAL_PACKAGES.find(\n    (dependency) =>\n      ids.some((id) => id.replaceAll('\\\\', '/').includes(dependency)) &&\n      ids.every((id) => owned.get(dependency)?.has(id)),\n  );\n}\n\nfunction references(output: PolicyOutput): string[] {\n  if (output.type === 'asset') return [];\n  return [\n    ...(output.imports ?? []),\n    ...(output.dynamicImports ?? []),\n    ...(output.referencedFiles ?? []),\n    ...(output.viteMetadata?.importedAssets ?? []),\n  ];\n}\n\n/** Classifies only output owned exclusively by a known optional dependency graph. */\nexport function classifyOptionalBundleAssets(\n  bundle: Readonly<Record<string, PolicyOutput>>,\n  moduleDependencies?: (id: string) => readonly string[] | undefined,\n): string[] {\n  const outputs = new Map(Object.entries(bundle));\n  const owned = new Map<string, Set<string>>();\n  for (const dependency of OPTIONAL_PACKAGES) {\n    const modules = new Set<string>();\n    const visit = (id: string): void => {\n      // Application and unresolved virtual modules never inherit optional ownership.\n      if (modules.has(id) || !id.replaceAll('\\\\', '/').includes('/node_modules/')) return;\n      modules.add(id);\n      for (const imported of moduleDependencies?.(id) ?? []) visit(imported);\n    };\n    for (const output of outputs.values()) {\n      for (const id of Object.keys(output.modules ?? {})) {\n        if (id.replaceAll('\\\\', '/').includes(dependency)) visit(id);\n      }\n    }\n    owned.set(dependency, modules);\n  }\n  const graphReferences = (output: PolicyOutput): string[] => {\n    const source =\n      output.code ??\n      (typeof output.source === 'string'\n        ? output.source\n        : output.source === undefined\n          ? ''\n          : new TextDecoder().decode(output.source));\n    return [\n      ...references(output),\n      ...[...outputs]\n        .filter(([fileName, candidate]) => candidate.type === 'asset' && source.includes(fileName))\n        .map(([fileName]) => fileName),\n    ];\n  };\n  const optionalRoots = new Map<string, string>();\n  for (const [fileName, output] of outputs) {\n    if (output.type !== 'chunk') continue;\n    const owner = packageOwner(output, owned);\n    const facade = output.facadeModuleId?.replaceAll('\\\\', '/');\n    if (\n      owner !== undefined &&\n      (!output.isEntry || OPTIONAL_PACKAGES.some((dependency) => facade?.includes(dependency)))\n    ) {\n      optionalRoots.set(fileName, owner);\n    }\n  }\n\n  const eager = new Set<string>();\n  const visitEager = (fileName: string): void => {\n    if (eager.has(fileName)) return;\n    eager.add(fileName);\n    const output = outputs.get(fileName);\n    if (output === undefined) return;\n    for (const reference of graphReferences(output)) {\n      const deferredRoot = optionalRoots.has(reference) && output.dynamicImports?.includes(reference);\n      if (!deferredRoot) visitEager(reference);\n    }\n  };\n  for (const [fileName, output] of outputs) {\n    if (fileName === 'index.html' || (output.type === 'chunk' && output.isEntry && !optionalRoots.has(fileName)))\n      visitEager(fileName);\n  }\n\n  const optional = new Set<string>();\n  const visitOptional = (fileName: string, owner: string): void => {\n    if (eager.has(fileName) || optional.has(fileName)) return;\n    const output = outputs.get(fileName);\n    if (output === undefined) return;\n    if (output.type === 'chunk') {\n      const ids = Object.keys(output.modules ?? {});\n      if (ids.length === 0 || !ids.every((id) => owned.get(owner)?.has(id))) {\n        visitEager(fileName);\n        return;\n      }\n    }\n    optional.add(fileName);\n    for (const reference of graphReferences(output)) {\n      const referencedRootOwner = optionalRoots.get(reference);\n      if (referencedRootOwner === undefined || referencedRootOwner === owner) visitOptional(reference, owner);\n    }\n  };\n  for (const [fileName, owner] of optionalRoots) visitOptional(fileName, owner);\n  return [...optional]\n    .filter((fileName) => !eager.has(fileName) && !fileName.endsWith('.map'))\n    .map((fileName) => `/${fileName}`)\n    .sort();\n}\n\n/** Emits an authenticated v1 policy derived from Rollup's module and resource graph. */\nexport function bundleAssetPolicyPlugin(): Plugin {\n  return {\n    name: 'po-bundle-asset-policy',\n    generateBundle(_options, bundle) {\n      const policy: BundleAssetPolicy = {\n        version: BUNDLE_ASSET_POLICY_VERSION,\n        optional: classifyOptionalBundleAssets(bundle, (id) => {\n          const info = this.getModuleInfo(id);\n          return info === null ? undefined : [...info.importedIds, ...info.dynamicallyImportedIds];\n        }),\n      };\n      this.emitFile({\n        type: 'asset',\n        fileName: BUNDLE_ASSET_POLICY_PATH.slice(1),\n        source: `${JSON.stringify(policy)}\\n`,\n      });\n    },\n  };\n}\n"],"mappings":";;AAOA,MAAM,oBAAoB,CAAC,0BAA0B,2BAA2B;AAehF,SAAS,aAAa,QAAsB,OAAqE;CAC/G,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;CAC5C,OAAO,kBAAkB,MACtB,eACC,IAAI,MAAM,OAAO,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,UAAU,CAAC,KAC9D,IAAI,OAAO,OAAO,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CACpD;AACF;AAEA,SAAS,WAAW,QAAgC;CAClD,IAAI,OAAO,SAAS,SAAS,OAAO,CAAC;CACrC,OAAO;EACL,GAAI,OAAO,WAAW,CAAC;EACvB,GAAI,OAAO,kBAAkB,CAAC;EAC9B,GAAI,OAAO,mBAAmB,CAAC;EAC/B,GAAI,OAAO,cAAc,kBAAkB,CAAC;CAC9C;AACF;;AAGA,SAAgB,6BACd,QACA,oBACU;CACV,MAAM,UAAU,IAAI,IAAI,OAAO,QAAQ,MAAM,CAAC;CAC9C,MAAM,wBAAQ,IAAI,IAAyB;CAC3C,KAAK,MAAM,cAAc,mBAAmB;EAC1C,MAAM,0BAAU,IAAI,IAAY;EAChC,MAAM,SAAS,OAAqB;GAElC,IAAI,QAAQ,IAAI,EAAE,KAAK,CAAC,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,gBAAgB,GAAG;GAC7E,QAAQ,IAAI,EAAE;GACd,KAAK,MAAM,YAAY,qBAAqB,EAAE,KAAK,CAAC,GAAG,MAAM,QAAQ;EACvE;EACA,KAAK,MAAM,UAAU,QAAQ,OAAO,GAClC,KAAK,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,GAC/C,IAAI,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EAAE;EAG/D,MAAM,IAAI,YAAY,OAAO;CAC/B;CACA,MAAM,mBAAmB,WAAmC;EAC1D,MAAM,SACJ,OAAO,SACN,OAAO,OAAO,WAAW,WACtB,OAAO,SACP,OAAO,WAAW,KAAA,IAChB,KACA,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO,MAAM;EAC9C,OAAO,CACL,GAAG,WAAW,MAAM,GACpB,GAAG,CAAC,GAAG,OAAO,CAAC,CACZ,QAAQ,CAAC,UAAU,eAAe,UAAU,SAAS,WAAW,OAAO,SAAS,QAAQ,CAAC,CAAC,CAC1F,KAAK,CAAC,cAAc,QAAQ,CACjC;CACF;CACA,MAAM,gCAAgB,IAAI,IAAoB;CAC9C,KAAK,MAAM,CAAC,UAAU,WAAW,SAAS;EACxC,IAAI,OAAO,SAAS,SAAS;EAC7B,MAAM,QAAQ,aAAa,QAAQ,KAAK;EACxC,MAAM,SAAS,OAAO,gBAAgB,WAAW,MAAM,GAAG;EAC1D,IACE,UAAU,KAAA,MACT,CAAC,OAAO,WAAW,kBAAkB,MAAM,eAAe,QAAQ,SAAS,UAAU,CAAC,IAEvF,cAAc,IAAI,UAAU,KAAK;CAErC;CAEA,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,cAAc,aAA2B;EAC7C,IAAI,MAAM,IAAI,QAAQ,GAAG;EACzB,MAAM,IAAI,QAAQ;EAClB,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,WAAW,KAAA,GAAW;EAC1B,KAAK,MAAM,aAAa,gBAAgB,MAAM,GAE5C,IAAI,EADiB,cAAc,IAAI,SAAS,KAAK,OAAO,gBAAgB,SAAS,SAAS,IAC3E,WAAW,SAAS;CAE3C;CACA,KAAK,MAAM,CAAC,UAAU,WAAW,SAC/B,IAAI,aAAa,gBAAiB,OAAO,SAAS,WAAW,OAAO,WAAW,CAAC,cAAc,IAAI,QAAQ,GACxG,WAAW,QAAQ;CAGvB,MAAM,2BAAW,IAAI,IAAY;CACjC,MAAM,iBAAiB,UAAkB,UAAwB;EAC/D,IAAI,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG;EACnD,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,WAAW,KAAA,GAAW;EAC1B,IAAI,OAAO,SAAS,SAAS;GAC3B,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;GAC5C,IAAI,IAAI,WAAW,KAAK,CAAC,IAAI,OAAO,OAAO,MAAM,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG;IACrE,WAAW,QAAQ;IACnB;GACF;EACF;EACA,SAAS,IAAI,QAAQ;EACrB,KAAK,MAAM,aAAa,gBAAgB,MAAM,GAAG;GAC/C,MAAM,sBAAsB,cAAc,IAAI,SAAS;GACvD,IAAI,wBAAwB,KAAA,KAAa,wBAAwB,OAAO,cAAc,WAAW,KAAK;EACxG;CACF;CACA,KAAK,MAAM,CAAC,UAAU,UAAU,eAAe,cAAc,UAAU,KAAK;CAC5E,OAAO,CAAC,GAAG,QAAQ,CAAC,CACjB,QAAQ,aAAa,CAAC,MAAM,IAAI,QAAQ,KAAK,CAAC,SAAS,SAAS,MAAM,CAAC,CAAC,CACxE,KAAK,aAAa,IAAI,UAAU,CAAC,CACjC,KAAK;AACV;;AAGA,SAAgB,0BAAkC;CAChD,OAAO;EACL,MAAM;EACN,eAAe,UAAU,QAAQ;GAC/B,MAAM,SAA4B;IAChC,SAASA,qCAAAA;IACT,UAAU,6BAA6B,SAAS,OAAO;KACrD,MAAM,OAAO,KAAK,cAAc,EAAE;KAClC,OAAO,SAAS,OAAO,KAAA,IAAY,CAAC,GAAG,KAAK,aAAa,GAAG,KAAK,sBAAsB;IACzF,CAAC;GACH;GACA,KAAK,SAAS;IACZ,MAAM;IACN,UAAUC,qCAAAA,yBAAyB,MAAM,CAAC;IAC1C,QAAQ,GAAG,KAAK,UAAU,MAAM,EAAE;GACpC,CAAC;EACH;CACF;AACF"}

package/dist/src/builders/web/bundleAssetPolicy.d.mts

@@ -0,0 +1,22 @@
+import { Plugin } from "vite";
+//#region src/builders/web/bundleAssetPolicy.d.ts
+interface PolicyOutput {
+  type: 'asset' | 'chunk';
+  isEntry?: boolean;
+  facadeModuleId?: string | null;
+  modules?: Record<string, unknown>;
+  imports?: string[];
+  dynamicImports?: string[];
+  referencedFiles?: string[];
+  code?: string;
+  source?: string | Uint8Array;
+  viteMetadata?: {
+    importedAssets?: Set<string>;
+  };
+}
+/** Classifies only output owned exclusively by a known optional dependency graph. */
+export declare function classifyOptionalBundleAssets(bundle: Readonly<Record<string, PolicyOutput>>, moduleDependencies?: (id: string) => readonly string[] | undefined): string[];
+/** Emits an authenticated v1 policy derived from Rollup's module and resource graph. */
+export declare function bundleAssetPolicyPlugin(): Plugin;
+//#endregion
+//# sourceMappingURL=bundleAssetPolicy.d.mts.map

package/dist/src/builders/web/bundleAssetPolicy.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleAssetPolicy.d.mts","names":[],"sources":["../../../../src/builders/web/bundleAssetPolicy.ts"],"mappings":";;UASU;EACR;EACA;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;EACA,kBAAkB;EAClB;IAAiB,iBAAiB;;;;wBAuBpB,6BACd,QAAQ,SAAS,eAAe,gBAChC,sBAAsB;;wBAyFR,2BAA2B"}

package/dist/src/builders/web/bundleAssetPolicy.mjs

@@ -0,0 +1,95 @@
+import { BUNDLE_ASSET_POLICY_PATH, BUNDLE_ASSET_POLICY_VERSION } from "@agimon-ai/po-core/bundleAssetPolicy";
+//#region src/builders/web/bundleAssetPolicy.ts
+const OPTIONAL_PACKAGES = ["/node_modules/mermaid/", "/node_modules/pdfjs-dist/"];
+function packageOwner(output, owned) {
+	const ids = Object.keys(output.modules ?? {});
+	return OPTIONAL_PACKAGES.find((dependency) => ids.some((id) => id.replaceAll("\\", "/").includes(dependency)) && ids.every((id) => owned.get(dependency)?.has(id)));
+}
+function references(output) {
+	if (output.type === "asset") return [];
+	return [
+		...output.imports ?? [],
+		...output.dynamicImports ?? [],
+		...output.referencedFiles ?? [],
+		...output.viteMetadata?.importedAssets ?? []
+	];
+}
+/** Classifies only output owned exclusively by a known optional dependency graph. */
+function classifyOptionalBundleAssets(bundle, moduleDependencies) {
+	const outputs = new Map(Object.entries(bundle));
+	const owned = /* @__PURE__ */ new Map();
+	for (const dependency of OPTIONAL_PACKAGES) {
+		const modules = /* @__PURE__ */ new Set();
+		const visit = (id) => {
+			if (modules.has(id) || !id.replaceAll("\\", "/").includes("/node_modules/")) return;
+			modules.add(id);
+			for (const imported of moduleDependencies?.(id) ?? []) visit(imported);
+		};
+		for (const output of outputs.values()) for (const id of Object.keys(output.modules ?? {})) if (id.replaceAll("\\", "/").includes(dependency)) visit(id);
+		owned.set(dependency, modules);
+	}
+	const graphReferences = (output) => {
+		const source = output.code ?? (typeof output.source === "string" ? output.source : output.source === void 0 ? "" : new TextDecoder().decode(output.source));
+		return [...references(output), ...[...outputs].filter(([fileName, candidate]) => candidate.type === "asset" && source.includes(fileName)).map(([fileName]) => fileName)];
+	};
+	const optionalRoots = /* @__PURE__ */ new Map();
+	for (const [fileName, output] of outputs) {
+		if (output.type !== "chunk") continue;
+		const owner = packageOwner(output, owned);
+		const facade = output.facadeModuleId?.replaceAll("\\", "/");
+		if (owner !== void 0 && (!output.isEntry || OPTIONAL_PACKAGES.some((dependency) => facade?.includes(dependency)))) optionalRoots.set(fileName, owner);
+	}
+	const eager = /* @__PURE__ */ new Set();
+	const visitEager = (fileName) => {
+		if (eager.has(fileName)) return;
+		eager.add(fileName);
+		const output = outputs.get(fileName);
+		if (output === void 0) return;
+		for (const reference of graphReferences(output)) if (!(optionalRoots.has(reference) && output.dynamicImports?.includes(reference))) visitEager(reference);
+	};
+	for (const [fileName, output] of outputs) if (fileName === "index.html" || output.type === "chunk" && output.isEntry && !optionalRoots.has(fileName)) visitEager(fileName);
+	const optional = /* @__PURE__ */ new Set();
+	const visitOptional = (fileName, owner) => {
+		if (eager.has(fileName) || optional.has(fileName)) return;
+		const output = outputs.get(fileName);
+		if (output === void 0) return;
+		if (output.type === "chunk") {
+			const ids = Object.keys(output.modules ?? {});
+			if (ids.length === 0 || !ids.every((id) => owned.get(owner)?.has(id))) {
+				visitEager(fileName);
+				return;
+			}
+		}
+		optional.add(fileName);
+		for (const reference of graphReferences(output)) {
+			const referencedRootOwner = optionalRoots.get(reference);
+			if (referencedRootOwner === void 0 || referencedRootOwner === owner) visitOptional(reference, owner);
+		}
+	};
+	for (const [fileName, owner] of optionalRoots) visitOptional(fileName, owner);
+	return [...optional].filter((fileName) => !eager.has(fileName) && !fileName.endsWith(".map")).map((fileName) => `/${fileName}`).sort();
+}
+/** Emits an authenticated v1 policy derived from Rollup's module and resource graph. */
+function bundleAssetPolicyPlugin() {
+	return {
+		name: "po-bundle-asset-policy",
+		generateBundle(_options, bundle) {
+			const policy = {
+				version: BUNDLE_ASSET_POLICY_VERSION,
+				optional: classifyOptionalBundleAssets(bundle, (id) => {
+					const info = this.getModuleInfo(id);
+					return info === null ? void 0 : [...info.importedIds, ...info.dynamicallyImportedIds];
+				})
+			};
+			this.emitFile({
+				type: "asset",
+				fileName: BUNDLE_ASSET_POLICY_PATH.slice(1),
+				source: `${JSON.stringify(policy)}\n`
+			});
+		}
+	};
+}
+//#endregion
+export { bundleAssetPolicyPlugin, classifyOptionalBundleAssets };
+
+//# sourceMappingURL=bundleAssetPolicy.mjs.map

package/dist/src/builders/web/bundleAssetPolicy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleAssetPolicy.mjs","names":[],"sources":["../../../../src/builders/web/bundleAssetPolicy.ts"],"sourcesContent":["import {\n  BUNDLE_ASSET_POLICY_PATH,\n  BUNDLE_ASSET_POLICY_VERSION,\n  type BundleAssetPolicy,\n} from '@agimon-ai/po-core/bundleAssetPolicy';\nimport type { Plugin } from 'vite';\n\nconst OPTIONAL_PACKAGES = ['/node_modules/mermaid/', '/node_modules/pdfjs-dist/'] as const;\n\ninterface PolicyOutput {\n  type: 'asset' | 'chunk';\n  isEntry?: boolean;\n  facadeModuleId?: string | null;\n  modules?: Record<string, unknown>;\n  imports?: string[];\n  dynamicImports?: string[];\n  referencedFiles?: string[];\n  code?: string;\n  source?: string | Uint8Array;\n  viteMetadata?: { importedAssets?: Set<string> };\n}\n\nfunction packageOwner(output: PolicyOutput, owned: ReadonlyMap<string, ReadonlySet<string>>): string | undefined {\n  const ids = Object.keys(output.modules ?? {});\n  return OPTIONAL_PACKAGES.find(\n    (dependency) =>\n      ids.some((id) => id.replaceAll('\\\\', '/').includes(dependency)) &&\n      ids.every((id) => owned.get(dependency)?.has(id)),\n  );\n}\n\nfunction references(output: PolicyOutput): string[] {\n  if (output.type === 'asset') return [];\n  return [\n    ...(output.imports ?? []),\n    ...(output.dynamicImports ?? []),\n    ...(output.referencedFiles ?? []),\n    ...(output.viteMetadata?.importedAssets ?? []),\n  ];\n}\n\n/** Classifies only output owned exclusively by a known optional dependency graph. */\nexport function classifyOptionalBundleAssets(\n  bundle: Readonly<Record<string, PolicyOutput>>,\n  moduleDependencies?: (id: string) => readonly string[] | undefined,\n): string[] {\n  const outputs = new Map(Object.entries(bundle));\n  const owned = new Map<string, Set<string>>();\n  for (const dependency of OPTIONAL_PACKAGES) {\n    const modules = new Set<string>();\n    const visit = (id: string): void => {\n      // Application and unresolved virtual modules never inherit optional ownership.\n      if (modules.has(id) || !id.replaceAll('\\\\', '/').includes('/node_modules/')) return;\n      modules.add(id);\n      for (const imported of moduleDependencies?.(id) ?? []) visit(imported);\n    };\n    for (const output of outputs.values()) {\n      for (const id of Object.keys(output.modules ?? {})) {\n        if (id.replaceAll('\\\\', '/').includes(dependency)) visit(id);\n      }\n    }\n    owned.set(dependency, modules);\n  }\n  const graphReferences = (output: PolicyOutput): string[] => {\n    const source =\n      output.code ??\n      (typeof output.source === 'string'\n        ? output.source\n        : output.source === undefined\n          ? ''\n          : new TextDecoder().decode(output.source));\n    return [\n      ...references(output),\n      ...[...outputs]\n        .filter(([fileName, candidate]) => candidate.type === 'asset' && source.includes(fileName))\n        .map(([fileName]) => fileName),\n    ];\n  };\n  const optionalRoots = new Map<string, string>();\n  for (const [fileName, output] of outputs) {\n    if (output.type !== 'chunk') continue;\n    const owner = packageOwner(output, owned);\n    const facade = output.facadeModuleId?.replaceAll('\\\\', '/');\n    if (\n      owner !== undefined &&\n      (!output.isEntry || OPTIONAL_PACKAGES.some((dependency) => facade?.includes(dependency)))\n    ) {\n      optionalRoots.set(fileName, owner);\n    }\n  }\n\n  const eager = new Set<string>();\n  const visitEager = (fileName: string): void => {\n    if (eager.has(fileName)) return;\n    eager.add(fileName);\n    const output = outputs.get(fileName);\n    if (output === undefined) return;\n    for (const reference of graphReferences(output)) {\n      const deferredRoot = optionalRoots.has(reference) && output.dynamicImports?.includes(reference);\n      if (!deferredRoot) visitEager(reference);\n    }\n  };\n  for (const [fileName, output] of outputs) {\n    if (fileName === 'index.html' || (output.type === 'chunk' && output.isEntry && !optionalRoots.has(fileName)))\n      visitEager(fileName);\n  }\n\n  const optional = new Set<string>();\n  const visitOptional = (fileName: string, owner: string): void => {\n    if (eager.has(fileName) || optional.has(fileName)) return;\n    const output = outputs.get(fileName);\n    if (output === undefined) return;\n    if (output.type === 'chunk') {\n      const ids = Object.keys(output.modules ?? {});\n      if (ids.length === 0 || !ids.every((id) => owned.get(owner)?.has(id))) {\n        visitEager(fileName);\n        return;\n      }\n    }\n    optional.add(fileName);\n    for (const reference of graphReferences(output)) {\n      const referencedRootOwner = optionalRoots.get(reference);\n      if (referencedRootOwner === undefined || referencedRootOwner === owner) visitOptional(reference, owner);\n    }\n  };\n  for (const [fileName, owner] of optionalRoots) visitOptional(fileName, owner);\n  return [...optional]\n    .filter((fileName) => !eager.has(fileName) && !fileName.endsWith('.map'))\n    .map((fileName) => `/${fileName}`)\n    .sort();\n}\n\n/** Emits an authenticated v1 policy derived from Rollup's module and resource graph. */\nexport function bundleAssetPolicyPlugin(): Plugin {\n  return {\n    name: 'po-bundle-asset-policy',\n    generateBundle(_options, bundle) {\n      const policy: BundleAssetPolicy = {\n        version: BUNDLE_ASSET_POLICY_VERSION,\n        optional: classifyOptionalBundleAssets(bundle, (id) => {\n          const info = this.getModuleInfo(id);\n          return info === null ? undefined : [...info.importedIds, ...info.dynamicallyImportedIds];\n        }),\n      };\n      this.emitFile({\n        type: 'asset',\n        fileName: BUNDLE_ASSET_POLICY_PATH.slice(1),\n        source: `${JSON.stringify(policy)}\\n`,\n      });\n    },\n  };\n}\n"],"mappings":";;AAOA,MAAM,oBAAoB,CAAC,0BAA0B,2BAA2B;AAehF,SAAS,aAAa,QAAsB,OAAqE;CAC/G,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;CAC5C,OAAO,kBAAkB,MACtB,eACC,IAAI,MAAM,OAAO,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,UAAU,CAAC,KAC9D,IAAI,OAAO,OAAO,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CACpD;AACF;AAEA,SAAS,WAAW,QAAgC;CAClD,IAAI,OAAO,SAAS,SAAS,OAAO,CAAC;CACrC,OAAO;EACL,GAAI,OAAO,WAAW,CAAC;EACvB,GAAI,OAAO,kBAAkB,CAAC;EAC9B,GAAI,OAAO,mBAAmB,CAAC;EAC/B,GAAI,OAAO,cAAc,kBAAkB,CAAC;CAC9C;AACF;;AAGA,SAAgB,6BACd,QACA,oBACU;CACV,MAAM,UAAU,IAAI,IAAI,OAAO,QAAQ,MAAM,CAAC;CAC9C,MAAM,wBAAQ,IAAI,IAAyB;CAC3C,KAAK,MAAM,cAAc,mBAAmB;EAC1C,MAAM,0BAAU,IAAI,IAAY;EAChC,MAAM,SAAS,OAAqB;GAElC,IAAI,QAAQ,IAAI,EAAE,KAAK,CAAC,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,gBAAgB,GAAG;GAC7E,QAAQ,IAAI,EAAE;GACd,KAAK,MAAM,YAAY,qBAAqB,EAAE,KAAK,CAAC,GAAG,MAAM,QAAQ;EACvE;EACA,KAAK,MAAM,UAAU,QAAQ,OAAO,GAClC,KAAK,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,GAC/C,IAAI,GAAG,WAAW,MAAM,GAAG,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EAAE;EAG/D,MAAM,IAAI,YAAY,OAAO;CAC/B;CACA,MAAM,mBAAmB,WAAmC;EAC1D,MAAM,SACJ,OAAO,SACN,OAAO,OAAO,WAAW,WACtB,OAAO,SACP,OAAO,WAAW,KAAA,IAChB,KACA,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO,MAAM;EAC9C,OAAO,CACL,GAAG,WAAW,MAAM,GACpB,GAAG,CAAC,GAAG,OAAO,CAAC,CACZ,QAAQ,CAAC,UAAU,eAAe,UAAU,SAAS,WAAW,OAAO,SAAS,QAAQ,CAAC,CAAC,CAC1F,KAAK,CAAC,cAAc,QAAQ,CACjC;CACF;CACA,MAAM,gCAAgB,IAAI,IAAoB;CAC9C,KAAK,MAAM,CAAC,UAAU,WAAW,SAAS;EACxC,IAAI,OAAO,SAAS,SAAS;EAC7B,MAAM,QAAQ,aAAa,QAAQ,KAAK;EACxC,MAAM,SAAS,OAAO,gBAAgB,WAAW,MAAM,GAAG;EAC1D,IACE,UAAU,KAAA,MACT,CAAC,OAAO,WAAW,kBAAkB,MAAM,eAAe,QAAQ,SAAS,UAAU,CAAC,IAEvF,cAAc,IAAI,UAAU,KAAK;CAErC;CAEA,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,cAAc,aAA2B;EAC7C,IAAI,MAAM,IAAI,QAAQ,GAAG;EACzB,MAAM,IAAI,QAAQ;EAClB,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,WAAW,KAAA,GAAW;EAC1B,KAAK,MAAM,aAAa,gBAAgB,MAAM,GAE5C,IAAI,EADiB,cAAc,IAAI,SAAS,KAAK,OAAO,gBAAgB,SAAS,SAAS,IAC3E,WAAW,SAAS;CAE3C;CACA,KAAK,MAAM,CAAC,UAAU,WAAW,SAC/B,IAAI,aAAa,gBAAiB,OAAO,SAAS,WAAW,OAAO,WAAW,CAAC,cAAc,IAAI,QAAQ,GACxG,WAAW,QAAQ;CAGvB,MAAM,2BAAW,IAAI,IAAY;CACjC,MAAM,iBAAiB,UAAkB,UAAwB;EAC/D,IAAI,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG;EACnD,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,WAAW,KAAA,GAAW;EAC1B,IAAI,OAAO,SAAS,SAAS;GAC3B,MAAM,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;GAC5C,IAAI,IAAI,WAAW,KAAK,CAAC,IAAI,OAAO,OAAO,MAAM,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG;IACrE,WAAW,QAAQ;IACnB;GACF;EACF;EACA,SAAS,IAAI,QAAQ;EACrB,KAAK,MAAM,aAAa,gBAAgB,MAAM,GAAG;GAC/C,MAAM,sBAAsB,cAAc,IAAI,SAAS;GACvD,IAAI,wBAAwB,KAAA,KAAa,wBAAwB,OAAO,cAAc,WAAW,KAAK;EACxG;CACF;CACA,KAAK,MAAM,CAAC,UAAU,UAAU,eAAe,cAAc,UAAU,KAAK;CAC5E,OAAO,CAAC,GAAG,QAAQ,CAAC,CACjB,QAAQ,aAAa,CAAC,MAAM,IAAI,QAAQ,KAAK,CAAC,SAAS,SAAS,MAAM,CAAC,CAAC,CACxE,KAAK,aAAa,IAAI,UAAU,CAAC,CACjC,KAAK;AACV;;AAGA,SAAgB,0BAAkC;CAChD,OAAO;EACL,MAAM;EACN,eAAe,UAAU,QAAQ;GAC/B,MAAM,SAA4B;IAChC,SAAS;IACT,UAAU,6BAA6B,SAAS,OAAO;KACrD,MAAM,OAAO,KAAK,cAAc,EAAE;KAClC,OAAO,SAAS,OAAO,KAAA,IAAY,CAAC,GAAG,KAAK,aAAa,GAAG,KAAK,sBAAsB;IACzF,CAAC;GACH;GACA,KAAK,SAAS;IACZ,MAAM;IACN,UAAU,yBAAyB,MAAM,CAAC;IAC1C,QAAQ,GAAG,KAAK,UAAU,MAAM,EAAE;GACpC,CAAC;EACH;CACF;AACF"}